@clampd/sdk 0.15.0 → 0.16.0

package/dist/_frameworkAdapters.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Framework tool-object adapters and the unregistered-tool detector.
+ *
+ * Mirrors `clampd._framework_adapters` in the Python SDK. Two
+ * unrelated-but-thin concerns live here so we don't multiply tiny
+ * helper modules:
+ *
+ *   1. {@link extractToolDescriptor} — duck-type a LangChain
+ *      `BaseTool` / OpenAI tool def / Anthropic tool def into a
+ *      plain `{ name, description, paramSchema }` triple. Used by
+ *      the `registerTool(toolObject, opts)` overload so callers can
+ *      pass their existing framework tool object instead of
+ *      restating its name / description / schema.
+ *
+ *   2. {@link raiseIfUnregistered} — convert the gateway's
+ *      `denial_reason` strings starting with `tool_not_registered:`
+ *      or `tool_not_classified:` into a typed
+ *      {@link ClampdUnregisteredToolError}. Centralised here so
+ *      every wrapper that calls `client.proxy()` can short-circuit
+ *      with the same exception, ahead of throwing the more general
+ *      {@link ClampdBlockedError}.
+ *
+ * Pure TypeScript — no framework imports. Every shape check is duck
+ * typing so loading the SDK does not require LangChain / OpenAI /
+ * Anthropic SDKs to be installed.
+ */
+import type { ProxyResponse } from "./client.js";
+/**
+ * Plain triple extracted from an arbitrary framework tool object.
+ *
+ * `paramSchema` is whatever the framework gave us (zod schema, JSON
+ * Schema, ad-hoc dict). Downstream code that hashes it (`contractHash`)
+ * tolerates anything serialisable; LangChain `zod` schemas are passed
+ * through `_zodToJsonSchema` first so the hash stays stable across
+ * runs.
+ */
+export interface ExtractedDescriptor {
+    name: string;
+    description: string;
+    paramSchema: object;
+}
+/**
+ * Detect and extract `{ name, description, paramSchema }` from a
+ * LangChain `BaseTool`, OpenAI tool def, Anthropic tool def, or
+ * Vercel AI SDK tool def.
+ *
+ * Returns `null` when the value doesn't look like any known tool
+ * shape — caller should fall through to the `(name, opts)` overload
+ * or raise.
+ *
+ * Detection rules (duck typing — order matters, most specific first):
+ *
+ *   - OpenAI tool def: `{ type: 'function', function: { name, ... } }`
+ *   - Anthropic tool def: `{ name, input_schema }` (no `function` key)
+ *   - LangChain BaseTool: has `.name` plus either `.schema` (zod) or
+ *     `.args_schema` (legacy)
+ *   - Vercel AI SDK: has `.parameters` plus `.execute`/`.description`
+ *     (handled via the LangChain branch since `.name` is keyed
+ *     externally for Vercel; if `.name` is missing, returns `null`)
+ */
+export declare function extractToolDescriptor(value: unknown): ExtractedDescriptor | null;
+/**
+ * Inspect a {@link ProxyResponse} and throw a typed exception if the
+ * gateway denied the call for a descriptor-related reason.
+ *
+ * Three prefixes on `denial_reason` are handled:
+ *
+ *   - `tool_not_registered:<name>` → {@link ClampdUnregisteredToolError}
+ *     (descriptor missing entirely)
+ *   - `tool_not_classified:<name>` → {@link ClampdUnregisteredToolError}
+ *     (descriptor exists but rejected classification at registration time)
+ *   - `descriptor_hash_mismatch:<...>` → {@link ClampdDescriptorMismatchError}
+ *     (descriptor exists but the hash sent doesn't match any approved
+ *     version — rug-pull-detection signal)
+ *
+ * For `descriptor_hash_mismatch`, the attempted hash is parsed from the
+ * reason text (`"with hash <hex>"`) and attached to the error.
+ *
+ * No-op for any other denial reason — the caller is expected to throw
+ * its own {@link ClampdBlockedError} downstream.
+ *
+ * Mirrors the prefix scheme used by the Python SDK's
+ * `_raise_for_descriptor_errors`.
+ */
+export declare function raiseForDescriptorErrors(toolName: string, resp: ProxyResponse | undefined): void;
+/**
+ * Backward-compat alias for {@link raiseForDescriptorErrors}.
+ *
+ * Originally only handled `tool_not_registered:` / `tool_not_classified:`
+ * prefixes. It now also throws {@link ClampdDescriptorMismatchError}
+ * on `descriptor_hash_mismatch:` — kept under the old name so existing
+ * call sites (interceptor, langchain, stream-guard, guardrails) keep
+ * working without a rename touching every wrapper.
+ */
+export declare function raiseIfUnregistered(toolName: string, resp: ProxyResponse | undefined): void;
+/**
+ * Maps `toolName -> contractHash` for every successful
+ * `registerTool()` call in this process. The OpenAI / Anthropic /
+ * LangChain wrappers prefer this cached hash over computing one on
+ * the fly — that way the hash sent to the gateway exactly matches
+ * the hash that was registered, even when the wrapper has incomplete
+ * information about the tool's parameter schema (e.g. LangChain
+ * callbacks don't surface the pydantic schema through `serialized`).
+ *
+ * Mirrors `clampd._framework_adapters._registered_descriptors` in the
+ * Python SDK.
+ */
+export declare const _registeredDescriptors: Map<string, string>;
+//# sourceMappingURL=_frameworkAdapters.d.ts.map

package/dist/_frameworkAdapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_frameworkAdapters.d.ts","sourceRoot":"","sources":["../src/_frameworkAdapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQjD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AA0CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAgDhF;AAQD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAAG,SAAS,GAC9B,IAAI,CAeN;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAAG,SAAS,GAC9B,IAAI,CAEN;AAID;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAa,CAAC"}

package/dist/_frameworkAdapters.js

@@ -0,0 +1,203 @@
+/**
+ * Framework tool-object adapters and the unregistered-tool detector.
+ *
+ * Mirrors `clampd._framework_adapters` in the Python SDK. Two
+ * unrelated-but-thin concerns live here so we don't multiply tiny
+ * helper modules:
+ *
+ *   1. {@link extractToolDescriptor} — duck-type a LangChain
+ *      `BaseTool` / OpenAI tool def / Anthropic tool def into a
+ *      plain `{ name, description, paramSchema }` triple. Used by
+ *      the `registerTool(toolObject, opts)` overload so callers can
+ *      pass their existing framework tool object instead of
+ *      restating its name / description / schema.
+ *
+ *   2. {@link raiseIfUnregistered} — convert the gateway's
+ *      `denial_reason` strings starting with `tool_not_registered:`
+ *      or `tool_not_classified:` into a typed
+ *      {@link ClampdUnregisteredToolError}. Centralised here so
+ *      every wrapper that calls `client.proxy()` can short-circuit
+ *      with the same exception, ahead of throwing the more general
+ *      {@link ClampdBlockedError}.
+ *
+ * Pure TypeScript — no framework imports. Every shape check is duck
+ * typing so loading the SDK does not require LangChain / OpenAI /
+ * Anthropic SDKs to be installed.
+ */
+import { ClampdDescriptorMismatchError, ClampdUnregisteredToolError, } from "./errors.js";
+import { createRequire } from "node:module";
+const _moduleRequire = createRequire(import.meta.url);
+/**
+ * Best-effort conversion of a zod schema to a JSON Schema dict.
+ *
+ * zod 4 ships `z.toJSONSchema()`; we resolve it lazily because the SDK
+ * lists zod as an optional peer dep. Returns `{}` if anything fails so
+ * the caller still gets a stable (if less informative) descriptor.
+ *
+ * Sync resolution via `createRequire` is deliberate: `extractToolDescriptor`
+ * runs inside `registerTool()` which is already async, but the rest of the
+ * SDK (notably the LangChain callback fast-path) treats descriptor
+ * extraction as a synchronous step. Dynamic `import()` would force every
+ * caller to await, which would ripple through the whole adapter surface
+ * for no real benefit — `node:module.createRequire` gives us the same
+ * lazy-load semantics with a sync return.
+ */
+function zodToJsonSchema(schema) {
+    if (!schema || typeof schema !== "object")
+        return {};
+    // Heuristic: zod schemas have `_def` and `parse`.
+    const maybeZod = schema;
+    if (!maybeZod._def || typeof maybeZod.parse !== "function")
+        return {};
+    try {
+        const zodMod = _moduleRequire("zod");
+        const z = zodMod.z;
+        if (z?.toJSONSchema) {
+            const out = z.toJSONSchema(schema);
+            if (out && typeof out === "object")
+                return out;
+        }
+    }
+    catch {
+        // Either zod isn't installed or it's an older version without
+        // toJSONSchema — fall through to {}.
+    }
+    return {};
+}
+/**
+ * Detect and extract `{ name, description, paramSchema }` from a
+ * LangChain `BaseTool`, OpenAI tool def, Anthropic tool def, or
+ * Vercel AI SDK tool def.
+ *
+ * Returns `null` when the value doesn't look like any known tool
+ * shape — caller should fall through to the `(name, opts)` overload
+ * or raise.
+ *
+ * Detection rules (duck typing — order matters, most specific first):
+ *
+ *   - OpenAI tool def: `{ type: 'function', function: { name, ... } }`
+ *   - Anthropic tool def: `{ name, input_schema }` (no `function` key)
+ *   - LangChain BaseTool: has `.name` plus either `.schema` (zod) or
+ *     `.args_schema` (legacy)
+ *   - Vercel AI SDK: has `.parameters` plus `.execute`/`.description`
+ *     (handled via the LangChain branch since `.name` is keyed
+ *     externally for Vercel; if `.name` is missing, returns `null`)
+ */
+export function extractToolDescriptor(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const v = value;
+    // OpenAI: { type: 'function', function: { name, description, parameters } }
+    if (v.type === "function" && v.function && typeof v.function === "object") {
+        const fn = v.function;
+        if (typeof fn.name === "string") {
+            return {
+                name: fn.name,
+                description: typeof fn.description === "string" ? fn.description : "",
+                paramSchema: fn.parameters ?? {},
+            };
+        }
+    }
+    // Anthropic: { name, description, input_schema }
+    if (typeof v.name === "string" && v.input_schema && typeof v.input_schema === "object") {
+        return {
+            name: v.name,
+            description: typeof v.description === "string" ? v.description : "",
+            paramSchema: v.input_schema,
+        };
+    }
+    // LangChain BaseTool: .name + (.schema (zod) | .args_schema (legacy))
+    if (typeof v.name === "string" && (v.schema !== undefined || v.args_schema !== undefined)) {
+        const schema = v.schema ?? v.args_schema;
+        let paramSchema;
+        if (schema && typeof schema === "object") {
+            // zod schema?
+            const maybeZod = schema;
+            if (maybeZod._def && typeof maybeZod.parse === "function") {
+                paramSchema = zodToJsonSchema(schema);
+            }
+            else {
+                paramSchema = schema;
+            }
+        }
+        else {
+            paramSchema = {};
+        }
+        return {
+            name: v.name,
+            description: typeof v.description === "string" ? v.description : "",
+            paramSchema,
+        };
+    }
+    return null;
+}
+// ── Descriptor-error detection ──────────────────────────────────────
+/** Regex matching the `with hash <hex>` fragment the gateway embeds in
+ * `descriptor_hash_mismatch:` denial reasons. */
+const DESCRIPTOR_HASH_RE = /with hash ([0-9a-fA-F]+)/;
+/**
+ * Inspect a {@link ProxyResponse} and throw a typed exception if the
+ * gateway denied the call for a descriptor-related reason.
+ *
+ * Three prefixes on `denial_reason` are handled:
+ *
+ *   - `tool_not_registered:<name>` → {@link ClampdUnregisteredToolError}
+ *     (descriptor missing entirely)
+ *   - `tool_not_classified:<name>` → {@link ClampdUnregisteredToolError}
+ *     (descriptor exists but rejected classification at registration time)
+ *   - `descriptor_hash_mismatch:<...>` → {@link ClampdDescriptorMismatchError}
+ *     (descriptor exists but the hash sent doesn't match any approved
+ *     version — rug-pull-detection signal)
+ *
+ * For `descriptor_hash_mismatch`, the attempted hash is parsed from the
+ * reason text (`"with hash <hex>"`) and attached to the error.
+ *
+ * No-op for any other denial reason — the caller is expected to throw
+ * its own {@link ClampdBlockedError} downstream.
+ *
+ * Mirrors the prefix scheme used by the Python SDK's
+ * `_raise_for_descriptor_errors`.
+ */
+export function raiseForDescriptorErrors(toolName, resp) {
+    if (!resp || resp.allowed)
+        return;
+    const reason = resp.denial_reason;
+    if (typeof reason !== "string")
+        return;
+    if (reason.startsWith("tool_not_registered:") ||
+        reason.startsWith("tool_not_classified:")) {
+        throw new ClampdUnregisteredToolError(toolName);
+    }
+    if (reason.startsWith("descriptor_hash_mismatch:")) {
+        const match = DESCRIPTOR_HASH_RE.exec(reason);
+        const attemptedHash = match ? match[1] : undefined;
+        throw new ClampdDescriptorMismatchError(toolName, { attemptedHash });
+    }
+}
+/**
+ * Backward-compat alias for {@link raiseForDescriptorErrors}.
+ *
+ * Originally only handled `tool_not_registered:` / `tool_not_classified:`
+ * prefixes. It now also throws {@link ClampdDescriptorMismatchError}
+ * on `descriptor_hash_mismatch:` — kept under the old name so existing
+ * call sites (interceptor, langchain, stream-guard, guardrails) keep
+ * working without a rename touching every wrapper.
+ */
+export function raiseIfUnregistered(toolName, resp) {
+    raiseForDescriptorErrors(toolName, resp);
+}
+// ── Process-local descriptor cache ──────────────────────────────────
+/**
+ * Maps `toolName -> contractHash` for every successful
+ * `registerTool()` call in this process. The OpenAI / Anthropic /
+ * LangChain wrappers prefer this cached hash over computing one on
+ * the fly — that way the hash sent to the gateway exactly matches
+ * the hash that was registered, even when the wrapper has incomplete
+ * information about the tool's parameter schema (e.g. LangChain
+ * callbacks don't surface the pydantic schema through `serialized`).
+ *
+ * Mirrors `clampd._framework_adapters._registered_descriptors` in the
+ * Python SDK.
+ */
+export const _registeredDescriptors = new Map();
+//# sourceMappingURL=_frameworkAdapters.js.map

package/dist/_frameworkAdapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_frameworkAdapters.js","sourceRoot":"","sources":["../src/_frameworkAdapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAmBrB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEtD;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,kDAAkD;IAClD,MAAM,QAAQ,GAAG,MAA6C,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAElC,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,GAAa,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,qCAAqC;IACvC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,4EAA4E;IAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1E,MAAM,EAAE,GAAG,CAAC,CAAC,QAAmC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;gBACrE,WAAW,EAAG,EAAE,CAAC,UAAiC,IAAI,EAAE;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvF,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACnE,WAAW,EAAE,CAAC,CAAC,YAAsB;SACtC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,CAAC;QACzC,IAAI,WAAmB,CAAC;QACxB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,cAAc;YACd,MAAM,QAAQ,GAAG,MAA6C,CAAC;YAC/D,IAAI,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC1D,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,MAAgB,CAAC;YACjC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACnE,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AAEvE;iDACiD;AACjD,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,IAA+B;IAE/B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IACvC,IACE,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,MAAM,IAAI,6BAA6B,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,IAA+B;IAE/B,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,EAAE,CAAC"}

package/dist/errors.d.ts

@@ -26,4 +26,54 @@ export declare class ClampdClassificationError extends Error {
     readonly operation: string;
     constructor(category: string, subcategory: string, operation: string);
 }
+/**
+ * Thrown when a tool call is denied because the gateway has no descriptor
+ * registered for that tool name (or the descriptor failed classification
+ * and was rejected at registration time).
+ *
+ * Distinct from {@link import("./interceptor.js").ClampdBlockedError}
+ * (which signals a policy / risk / scope decision against a *known*
+ * tool) — this error means the tool is unknown to Clampd and the fix
+ * is to register it at module load time, not to relax a policy.
+ *
+ * The SDK raises this when the gateway returns
+ * `denial_reason` starting with `"tool_not_registered:"` or
+ * `"tool_not_classified:"`. Mirrors
+ * `clampd._errors.ClampdUnregisteredToolError` in the Python SDK so
+ * cross-language docs / examples stay in lockstep.
+ */
+export declare class ClampdUnregisteredToolError extends Error {
+    readonly toolName: string;
+    readonly hint: string;
+    constructor(toolName: string, opts?: {
+        hint?: string;
+    });
+}
+/**
+ * Thrown when a tool call is denied because the descriptor hash sent to
+ * the gateway doesn't match any approved hash for that tool name.
+ *
+ * Distinct from {@link ClampdUnregisteredToolError} (the tool is unknown
+ * entirely) and from {@link import("./interceptor.js").ClampdBlockedError}
+ * (a policy / risk / scope decision against an *approved* descriptor):
+ * this error means the descriptor exists, but its current hash isn't on
+ * the approved list — most often the tool's name / description /
+ * parameter schema changed since the dashboard approved it (rug-pull
+ * detection) and the new version needs to be approved.
+ *
+ * The SDK raises this when the gateway returns a `denial_reason`
+ * starting with `"descriptor_hash_mismatch:"`. The optional
+ * `attemptedHash` field is parsed from the reason text when present
+ * (gateway includes it as `"... with hash <hex> ..."`). Mirrors
+ * `clampd._errors.ClampdDescriptorMismatchError` in the Python SDK.
+ */
+export declare class ClampdDescriptorMismatchError extends Error {
+    readonly toolName: string;
+    readonly attemptedHash: string | undefined;
+    readonly hint: string;
+    constructor(toolName: string, opts?: {
+        attemptedHash?: string;
+        hint?: string;
+    });
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAYrE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAYrE;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;CASvD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAG3B,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;CAuBnD"}

package/dist/errors.js

@@ -35,4 +35,77 @@ export class ClampdClassificationError extends Error {
         this.operation = operation;
     }
 }
+/**
+ * Thrown when a tool call is denied because the gateway has no descriptor
+ * registered for that tool name (or the descriptor failed classification
+ * and was rejected at registration time).
+ *
+ * Distinct from {@link import("./interceptor.js").ClampdBlockedError}
+ * (which signals a policy / risk / scope decision against a *known*
+ * tool) — this error means the tool is unknown to Clampd and the fix
+ * is to register it at module load time, not to relax a policy.
+ *
+ * The SDK raises this when the gateway returns
+ * `denial_reason` starting with `"tool_not_registered:"` or
+ * `"tool_not_classified:"`. Mirrors
+ * `clampd._errors.ClampdUnregisteredToolError` in the Python SDK so
+ * cross-language docs / examples stay in lockstep.
+ */
+export class ClampdUnregisteredToolError extends Error {
+    toolName;
+    hint;
+    constructor(toolName, opts) {
+        const hint = opts?.hint ??
+            `Call clampd.registerTool('${toolName}', { category, subcategory, operation }) at module load time.`;
+        super(`Tool '${toolName}' is not registered with Clampd. ${hint}`);
+        this.name = "ClampdUnregisteredToolError";
+        this.toolName = toolName;
+        this.hint = hint;
+    }
+}
+/**
+ * Thrown when a tool call is denied because the descriptor hash sent to
+ * the gateway doesn't match any approved hash for that tool name.
+ *
+ * Distinct from {@link ClampdUnregisteredToolError} (the tool is unknown
+ * entirely) and from {@link import("./interceptor.js").ClampdBlockedError}
+ * (a policy / risk / scope decision against an *approved* descriptor):
+ * this error means the descriptor exists, but its current hash isn't on
+ * the approved list — most often the tool's name / description /
+ * parameter schema changed since the dashboard approved it (rug-pull
+ * detection) and the new version needs to be approved.
+ *
+ * The SDK raises this when the gateway returns a `denial_reason`
+ * starting with `"descriptor_hash_mismatch:"`. The optional
+ * `attemptedHash` field is parsed from the reason text when present
+ * (gateway includes it as `"... with hash <hex> ..."`). Mirrors
+ * `clampd._errors.ClampdDescriptorMismatchError` in the Python SDK.
+ */
+export class ClampdDescriptorMismatchError extends Error {
+    toolName;
+    attemptedHash;
+    hint;
+    constructor(toolName, opts) {
+        let hint;
+        if (opts?.hint !== undefined) {
+            hint = opts.hint;
+        }
+        else if (opts?.attemptedHash) {
+            hint =
+                `Approve hash ${opts.attemptedHash.slice(0, 16)}... in the ` +
+                    `dashboard for tool '${toolName}'.`;
+        }
+        else {
+            hint =
+                `Approve the new descriptor hash for tool '${toolName}' ` +
+                    `in the dashboard.`;
+        }
+        super(`Tool '${toolName}' descriptor hash does not match any approved ` +
+            `version. ${hint}`);
+        this.name = "ClampdDescriptorMismatchError";
+        this.toolName = toolName;
+        this.attemptedHash = opts?.attemptedHash;
+        this.hint = hint;
+    }
+}
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClC,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,SAAS,CAAS;IAElC,YAAY,QAAgB,EAAE,WAAmB,EAAE,SAAiB;QAClE,KAAK,CACH,6CAA6C,QAAQ,oBAAoB,WAAW,kBAAkB,SAAS,MAAM;YACnH,kCAAkC;YAClC,yEAAyE;YACzE,yFAAyF,CAC5F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClC,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,SAAS,CAAS;IAElC,YAAY,QAAgB,EAAE,WAAmB,EAAE,SAAiB;QAClE,KAAK,CACH,6CAA6C,QAAQ,oBAAoB,WAAW,kBAAkB,SAAS,MAAM;YACnH,kCAAkC;YAClC,yEAAyE;YACzE,yFAAyF,CAC5F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpC,QAAQ,CAAS;IACjB,IAAI,CAAS;IAE7B,YAAY,QAAgB,EAAE,IAAwB;QACpD,MAAM,IAAI,GACR,IAAI,EAAE,IAAI;YACV,6BAA6B,QAAQ,+DAA+D,CAAC;QACvG,KAAK,CAAC,SAAS,QAAQ,oCAAoC,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtC,QAAQ,CAAS;IACjB,aAAa,CAAqB;IAClC,IAAI,CAAS;IAE7B,YACE,QAAgB,EAChB,IAAgD;QAEhD,IAAI,IAAY,CAAC;QACjB,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC;YAC/B,IAAI;gBACF,gBAAgB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa;oBAC5D,uBAAuB,QAAQ,IAAI,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,IAAI;gBACF,6CAA6C,QAAQ,IAAI;oBACzD,mBAAmB,CAAC;QACxB,CAAC;QACD,KAAK,CACH,SAAS,QAAQ,gDAAgD;YAC/D,YAAY,IAAI,EAAE,CACrB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,IAAI,EAAE,aAAa,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/guardrails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAO9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAI/D;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,EACrB,SAAS,GAAE,MAAW,EACtB,QAAQ,GAAE,OAAe,EACzB,UAAU,GAAE,MAAW,GACtB,OAAO,CAAC,IAAI,CAAC,CAcf;AAID;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAarF;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAOxG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAO3G;AAID;;GAEG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAmCf;AAID;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAID;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,EACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAQ9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAI/D;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,EACrB,SAAS,GAAE,MAAW,EACtB,QAAQ,GAAE,OAAe,EACzB,UAAU,GAAE,MAAW,GACtB,OAAO,CAAC,IAAI,CAAC,CAcf;AAID;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAarF;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAOxG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAO3G;AAID;;GAEG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAID;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAID;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,EACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/guardrails.js

@@ -10,6 +10,7 @@ import { ClampdBlockedError } from "./interceptor.js";
 import { scanForSchemaInjection } from "./schema-injection.js";
 import { withDelegation, getDelegation } from "./delegation.js";
 import { setScopeToken } from "./tool-verify.js";
+import { raiseIfUnregistered, _registeredDescriptors } from "./_frameworkAdapters.js";
 // Re-export scanForSchemaInjection so callers that import from guardrails.js get it
 export { scanForSchemaInjection } from "./schema-injection.js";
 // ── Response inspection helper ────────────────────────────────────
@@ -111,11 +112,16 @@ export async function scanInputOpenAI(client, messages, failOpen) {
     try {
         const inputResult = await client.scanInput(userMessages, messages.length);
         if (!inputResult.allowed) {
+            // Lift the ScanResponse fields (notably matched_rules) onto the
+            // synthesized ProxyResponse so the resulting ClampdBlockedError
+            // carries the same `.matchedRules` / `.response` ergonomic
+            // surface as a real proxy denial.
             throw new ClampdBlockedError({
                 request_id: "scan-input",
                 allowed: false,
                 risk_score: inputResult.risk_score,
                 denial_reason: inputResult.denial_reason || "Input blocked by guardrail",
+                matched_rules: inputResult.matched_rules ?? [],
                 latency_ms: inputResult.latency_ms,
                 degraded_stages: [],
                 session_flags: [],
@@ -159,6 +165,7 @@ export async function scanInputAnthropic(client, messages, failOpen) {
                 allowed: false,
                 risk_score: inputResult.risk_score,
                 denial_reason: inputResult.denial_reason || "Input blocked by guardrail",
+                matched_rules: inputResult.matched_rules ?? [],
                 latency_ms: inputResult.latency_ms,
                 degraded_stages: [],
                 session_flags: [],
@@ -187,6 +194,7 @@ export async function scanOutputContent(client, content, failOpen) {
                 allowed: false,
                 risk_score: outputResult.risk_score,
                 denial_reason: outputResult.denial_reason || "Output blocked by guardrail",
+                matched_rules: outputResult.matched_rules ?? [],
                 latency_ms: outputResult.latency_ms,
                 degraded_stages: [],
                 session_flags: [],
@@ -215,7 +223,14 @@ export async function guardToolCallWithDelegation(client, agentId, toolName, too
             };
         }
         try {
-            const res = await client.proxy(toolName, proxyParams, targetUrl, undefined, undefined, authorizedTools);
+            // Prefer the descriptor hash captured at registerTool() time over
+            // recomputing from partial info — framework callbacks (notably
+            // LangChain's on_tool_start) only see name + description, never
+            // the parameter schema, so an on-the-fly hash would miss the
+            // registered one and trip rug-pull detection.
+            const registeredHash = _registeredDescriptors.get(toolName);
+            const res = await client.proxy(toolName, proxyParams, targetUrl, undefined, registeredHash, authorizedTools);
+            raiseIfUnregistered(toolName, res);
             if (res.allowed && res.scope_token) {
                 setScopeToken(res.scope_token);
             }

package/dist/guardrails.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AAEjE,oFAAoF;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,IAAY,EACZ,YAAqB,EACrB,YAAoB,EAAE,EACtB,WAAoB,KAAK,EACzB,aAAqB,EAAE;IAEvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,IAAI,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;QACtG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC;gBAC1C,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG;gBACpD,aAAa,EAAE,+BAA+B,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;gBAChE,eAAe,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE;aACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAwC;IAC7E,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC;YAC3B,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YACvC,aAAa,EAAE,8BAA8B,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG;YACzH,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA2C;IAChF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,QAAgD,EAAE,IAA0B,CAAC;SAC3F,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA2C;IACnF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAA0B,CAAC;SACxC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACjF,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAQ,CAAC,CAAC,OAA0C;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,OAAe,EACf,QAAiB;IAEjB,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,6BAA6B;gBAC1E,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,QAAiC,EACjC,SAAiB,EACjB,QAAiB,EACjB,eAA0B;IAE1B,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7D,IAAI,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,WAAW,CAAC,WAAW,GAAG;gBACxB,gBAAgB,EAAE,UAAU,CAAC,KAAK;gBAClC,mBAAmB,EAAE,UAAU,CAAC,OAAO;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACxG,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,kBAAkB;gBAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,oFAAoF;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,IAAY,EACZ,YAAqB,EACrB,YAAoB,EAAE,EACtB,WAAoB,KAAK,EACzB,aAAqB,EAAE;IAEvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,IAAI,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;QACtG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC;gBAC1C,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG;gBACpD,aAAa,EAAE,+BAA+B,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;gBAChE,eAAe,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE;aACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAwC;IAC7E,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC;YAC3B,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YACvC,aAAa,EAAE,8BAA8B,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG;YACzH,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA2C;IAChF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,QAAgD,EAAE,IAA0B,CAAC;SAC3F,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA2C;IACnF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAA0B,CAAC;SACxC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACjF,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,gEAAgE;YAChE,gEAAgE;YAChE,2DAA2D;YAC3D,kCAAkC;YAClC,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,EAAE;gBAC9C,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAQ,CAAC,CAAC,OAA0C;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,EAAE;gBAC9C,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,OAAe,EACf,QAAiB;IAEjB,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,6BAA6B;gBAC1E,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,EAAE;gBAC/C,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,QAAiC,EACjC,SAAiB,EACjB,QAAiB,EACjB,eAA0B;IAE1B,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7D,IAAI,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,WAAW,CAAC,WAAW,GAAG;gBACxB,gBAAgB,EAAE,UAAU,CAAC,KAAK;gBAClC,mBAAmB,EAAE,UAAU,CAAC,OAAO;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,+DAA+D;YAC/D,gEAAgE;YAChE,6DAA6D;YAC7D,8CAA8C;YAC9C,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YAC7G,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,kBAAkB;gBAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -31,9 +31,9 @@ export type { ScopeTokenClaims } from "./tool-verify.js";
 export { ClampdClient, type ClampdClientOptions } from "./client.js";
 export { makeAgentJwt } from "./auth.js";
 export type { ProxyResponse, ScanResponse, ScanOutputResponse } from "./client.js";
-export { registerTool, type RegisterToolOptions } from "./register.js";
+export { registerTool, type RegisterToolOptions, type RegisterToolClassificationOptions, type RegisterToolClassificationOnly, } from "./register.js";
 export { TAXONOMY, validateClassification, computeScope, type ToolClassification, type CategorySpec, type SubcategorySpec, } from "./taxonomy.js";
-export { ClampdClassificationError } from "./errors.js";
+export { ClampdClassificationError, ClampdUnregisteredToolError, ClampdDescriptorMismatchError } from "./errors.js";
 export { contractHash, type ToolContract } from "./contract-hash.js";
 declare function guard<TArgs extends unknown[], TReturn>(fn: (...args: TArgs) => Promise<TReturn>, opts: GuardOptions): (...args: TArgs) => Promise<TReturn>;
 declare function tools(toolDefs: OpenAITool[], opts: WrapOptions): OpenAITool[];

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAiC,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,OAAO,EAAa,IAAI,EAAE,MAAM,EAAmB,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAG5G,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAChH,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKzD,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGnF,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAcrE,iBAAS,KAAK,CAAC,KAAK,SAAS,OAAO,EAAE,EAAE,OAAO,EAC7C,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,EACxC,IAAI,EAAE,YAAY,GACjB,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CA8EtC;AAID,iBAAS,KAAK,CACZ,QAAQ,EAAE,UAAU,EAAE,EACtB,IAAI,EAAE,WAAW,GAChB,UAAU,EAAE,CAmDd;AA+BD,KAAK,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAIxD,iBAAS,MAAM,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE;QAAE,WAAW,EAAE;YAAE,MAAM,EAAE,WAAW,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,EAC1E,MAAM,EAAE,CAAC,EACT,IAAI,EAAE,WAAW,GAChB,CAAC,CA+HH;AAID,iBAAS,SAAS,CAAC,CAAC,SAAS;IAAE,QAAQ,EAAE;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAA;CAAE,EAChE,MAAM,EAAE,CAAC,EACT,IAAI,EAAE,WAAW,GAChB,CAAC,CA6FH;AAID,UAAU,UAAU;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,YAAY;IACpB,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnG,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxF;AAED,iBAAS,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAkE3C;AAID,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,iBAAS,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EACtD,QAAQ,EAAE,CAAC,EACX,IAAI,EAAE,WAAW,GAChB,CAAC,CAiEH;AAID;;;;;;;;;;;;;;;GAeG;AACH,iBAAS,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnE;AAID,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAEvD,QAAA,MAAM,MAAM;;;;;;;;;;;;;CAAkJ,CAAC;AAC/J,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EAAiC,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,OAAO,EAAa,IAAI,EAAE,MAAM,EAAmB,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAG5G,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,eAAe,CAAC;AAI9D,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAChH,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKzD,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGnF,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,iCAAiC,EACtC,KAAK,8BAA8B,GACpC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACpH,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAcrE,iBAAS,KAAK,CAAC,KAAK,SAAS,OAAO,EAAE,EAAE,OAAO,EAC7C,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,EACxC,IAAI,EAAE,YAAY,GACjB,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CA0FtC;AAID,iBAAS,KAAK,CACZ,QAAQ,EAAE,UAAU,EAAE,EACtB,IAAI,EAAE,WAAW,GAChB,UAAU,EAAE,CAuDd;AA+BD,KAAK,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAIxD,iBAAS,MAAM,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE;QAAE,WAAW,EAAE;YAAE,MAAM,EAAE,WAAW,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,EAC1E,MAAM,EAAE,CAAC,EACT,IAAI,EAAE,WAAW,GAChB,CAAC,CA+HH;AAID,iBAAS,SAAS,CAAC,CAAC,SAAS;IAAE,QAAQ,EAAE;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAA;CAAE,EAChE,MAAM,EAAE,CAAC,EACT,IAAI,EAAE,WAAW,GAChB,CAAC,CA6FH;AAID,UAAU,UAAU;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,YAAY;IACpB,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnG,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxF;AAED,iBAAS,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CA+E3C;AAID,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,iBAAS,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EACtD,QAAQ,EAAE,CAAC,EACX,IAAI,EAAE,WAAW,GAChB,CAAC,CAqEH;AAID;;;;;;;;;;;;;;;GAeG;AACH,iBAAS,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnE;AAID,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAEvD,QAAA,MAAM,MAAM;;;;;;;;;;;;;CAAkJ,CAAC;AAC/J,eAAe,MAAM,CAAC"}